Sorry, I guess I'm not understanding your answer. The 'usual way' to install in an upstream distro would be to connect to the network. Again, as I understand it, in Qubes 4, we can't do that anymore from templates:
<quote> Templates don't have Net-VM's in Qubes 4. All updates are run over the Qubes-tools, and are no longer networked. [https://groups.google.com/d/msg/qubes-users/aBE-U9YKhjU/0t7hspsbAgAJ] </quote> What I imagine I'll try next is to get the RPM into the template filesystem and use command line tools to install it. Is that what you mean by "the usual methods"? That still leaves the package without a clear way to be updated. As far as the 'trusted' or 'not trusted' nature of a particular piece of software: We need to install what we need to install. If the system prevents people from doing what they need to do, they won't use the system -- that's axiomatic. So that's a net reduction in security. ('The best security is the security you use.') -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/05a419ca-8940-4b49-8acf-d19cea29c7fd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.